Create an IAM User Group

CloudCheckr recommends that all IAM users belong to an IAM user group, so you can apply group permissions to users who are members of group automatically.

It's more practical to create groups that relate to job functions—such as administrators, developers, finance professionals—and define the relevant permissions for each group. Once you have created your groups, you will assign IAM users to those groups.
All the users in an IAM group inherit the group permissions. When you change the group permissions, AWS will filter those changes to any IAM user that is a member of that group.

This topic shows you how to create an IAM user in the AWS Management Console.